{"ip":"35.205.254.119","total_events":32,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"20 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["20 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"22,323 bytes sent","bytes_sent":22323,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T06:23:25","last_seen":"2026-09-25T06:23:28","events_24h":0,"events_7d":32,"geo":{"country_code":"BE","country_name":"Belgium","region":"Brussels Capital","city":"Brussels","lat":50.8534,"lon":4.347,"asn":396982,"org":"Google LLC"},"source_domain":"119.254.205.35.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":32}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1115h2_c5d436628c5c_934397ce148c","t13d111400_c5d436628c5c_934397ce148c","t13d1114h2_c5d436628c5c_d2ecb6802617"],"tls_client_hello":"16030106910100068d03034a68d0acee96595ebf848be8522494ff0d41602e085e4fbbaa799bfdccb9aa5820c7ee3f5004d98d67b986855a39f3b19bb4194be336b99fbc1c51efcdbcb5b2950016130213031301c02cc02bc030c02fc024c023c028c0270100062eff010001000000001a001800001576706e2e6368696361676f2e76706e69676f2e6465000b000403000102000a0012001011ec001d0017001e0018001901000101002300000005000501000000000016000000170000000d0036003409050906090404030503060308070808081a081b081c0809080a080b080408050806040105010601030303010302040205020602002b00050403040303002d00020101003304ea04e811ec04c072f98bdfe3aeb296464f77bb43c89f1e04cc5f7515742bc0d81200b8b5cc6238321f430b21738bba1897706b5b50025e9d978dbfe9cdc7c56cbbe5907902497fc7a41d115087886335a22ed93218b55a57a1c39298ba1b6b86aa87db8eb3373468ecaeb5f144c30a5f12dc437fe808f0b690a3ac49963314f93b1d5d469ee45b58dd10c603045203dc5768b2a7c101a8e93299d8b17b8bf7a0c27271966566371411a513b4296793771b66cb4282c3598559440bde237fc97bb3566b1f01653d3fb96173838ead4c8bdb434c7ed04c369c0aa240bcbd3565106b702a429e099c0f06f73965377c3d20bfc6365f25c54f22c61a033b9e2b633b1e73c926133458e792f4c585b8626bff1bb8b2a61d53800faab73e5e302275868ca6c224445c8ca3a09c2fe7b08d6a317f7c89d74bb7a033a130781aee19363e9b8a0c9baacc74ca7cc64b42a958c5f059e3a789de697f66e696c0d9bc9ae674f8f972ee7a5d7d92253984683fe091836a2dc3b1b024e53aab20aeaf4472404712a95b560bea4efe466f8c1cbb7df22e6dfbcf2b9cb0e83bba7deab55cb72f10144541a9af9331c7771a1b20376056e03444263a670150328328c64365f97316d79a2866f46a03f12c1d859a024707ac726f0433648160270ebc9de3c70e054476ae65be91922742b54ae18a10e09119e20caab8a231bb50b7c5f27dc8a75f1f858cd5609805d42e8955c829c97756ac1de75696fce7a0838299c7332cdcaa34fac4b7442c6c03d25b430850702bc419417927b0a040a30ae818312cd9b256a0267c52389654be6e0c31cc4a5e2958764777a474689ec0d18f64c0a4ece5909cdb506d61169f41ae3d983d1bf86b8f376076ccb2a523a97e7469dce86b90929bfff7cb71db061b0475fdb053bd211e356662864b57d5ac63ffba4508a5232545a6c2d81b76b82a51eb22d7801d92b8a3a591ccdf7a9fedb14226541ef1e48fde103561ca81d795af48ba95ad5744240417f9f948f8588d7c6ca019064cc6164640c35cdd8811ac3704926c339a22399aa3b8f2e435291578723b948d17193d8a488ee858027015d1d47b4e5bcfebe6aeec4974fde65a3e14523db5c72030379880be8828b4d8e9b2d040101b6c1bbe307bf585a993281a48e23551529e7b5652284991cd296e31088517b69d00487cf8c6ca22e50faf02a1552536091b029d9b721d268658b20748ec909ae784fde80615a23fa4ca5322520317e81b2c480f57124903d0ac3ae57b768a66d230c35c62986ab224c51765b783612d8cc9bf798cc526a5f0a7139a7a791fab3a3a624dfa515819bb4fce0c305c7cce20b8aa74e262d8e38b3296940f7811ccb85cee4b1f3720546a15adbc251549086648c8cd8a3a4c80807ef69b6b407177dc067c1af791ca0aab30aa1b57159cb7b35c61d0913dda40cc19b5c10baeb94b74225c9eb01c30406325e9e534b5ab72c53c7a8115a34377b10e385b3880c6ea4c1db657acbab4a99c046a4988819ff919660cc8d24a6317d489ce691143903fb0d71879b0b9a325c93241497df0ab10d940e9184dc691776e35818f4a58645a01635a2bb9516ecca68bfa5a613e4805b2039e12344f60264ddd376ad03f096fd5ef1ec7009eb3e15b8c7f547e164a4d62e0ee2bd522e2676ee49f2b81263e8253f6365e6cda0bf4732091a87940027b2c81fef7ca89da36138b1e4b001d0020c8f50033ac4b70468202d3bfeb813dbf2158d4ba83f9ff7d4077e1570a67cc1b001b0005040001000300290094006f006923f0e60fc5efd9564ab4f5f9682105ac673a8558f2a3c3a7377ee67178b18256df6e21d0763d91ee855b20fd038fb4bf9845598a061021590d5ca92d77860d5215567b6cea165136c94e24cdb2826454879add28f80176892776a161a8b9a55ce6a72d05f01423a9d2fbb794e5002120f2d94fbb9d84dda0e44100cbb41394ec428d8d56c15a92304dcaa5b574e783","tls_ja3":["72904ca78b64c594073f154004c89f6d","fc6a00f80c3469f8b779058d9283c761","c4ae0642545df6d0ee7359453e2471c7"],"http_akin":["b11cun050_0004001e_a3d0c27a","b11cun030_00040012_f6d8d797"]},"fingerprint_peers":{"t13d1115h2_c5d436628c5c_934397ce148c":3,"t13d111400_c5d436628c5c_934397ce148c":3,"t13d1114h2_c5d436628c5c_d2ecb6802617":3,"b11cun050_0004001e_a3d0c27a":5,"b11cun030_00040012_f6d8d797":66},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-25","count":32}],"recent_events":[{"timestamp":"2026-09-25T06:23:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.php","summary":"","payload_hex":"474554202f2e656e762e70687020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a10eaa94-32ba-49d2-b643-65068b40478f","seq":8,"duration_ms":2374,"bytes_in":1330,"bytes_out":632},{"timestamp":"2026-09-25T06:23:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.openai","summary":"","payload_hex":"474554202f2e656e762e6f70656e616920485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a9c3c0ee-c902-4ed9-a311-fb84659bb17f","seq":8,"duration_ms":2418,"bytes_in":1344,"bytes_out":632},{"timestamp":"2026-09-25T06:23:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.old","summary":"","payload_hex":"474554202f2e656e762e6f6c6420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a10eaa94-32ba-49d2-b643-65068b40478f","seq":7,"duration_ms":2259,"bytes_in":1169,"bytes_out":553},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.aws","summary":"","payload_hex":"474554202f2e656e762e61777320485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a10eaa94-32ba-49d2-b643-65068b40478f","seq":4,"duration_ms":1113,"bytes_in":674,"bytes_out":316},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.example","summary":"","payload_hex":"474554202f2e656e762e6578616d706c6520485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a10eaa94-32ba-49d2-b643-65068b40478f","seq":6,"duration_ms":1748,"bytes_in":1008,"bytes_out":474},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.email","summary":"","payload_hex":"474554202f2e656e762e656d61696c20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"82a74491-312e-411b-beea-c8e011ea454c","seq":7,"duration_ms":1688,"bytes_in":1178,"bytes_out":553},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.docker","summary":"","payload_hex":"474554202f2e656e762e646f636b657220485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"076f5491-7b61-4f80-87f1-3ae3be5b506a","seq":7,"duration_ms":1770,"bytes_in":1195,"bytes_out":553},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.live","summary":"","payload_hex":"474554202f2e656e762e6c69766520485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a9c3c0ee-c902-4ed9-a311-fb84659bb17f","seq":7,"duration_ms":2095,"bytes_in":1180,"bytes_out":553},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.backup","summary":"","payload_hex":"474554202f2e656e762e6261636b757020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"076f5491-7b61-4f80-87f1-3ae3be5b506a","seq":6,"duration_ms":1349,"bytes_in":1031,"bytes_out":474},{"timestamp":"2026-09-25T06:23:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip, deflate\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.env.dist","summary":"","payload_hex":"474554202f2e656e762e6469737420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"72904ca78b64c594073f154004c89f6d","session":"a9c3c0ee-c902-4ed9-a311-fb84659bb17f","seq":6,"duration_ms":1739,"bytes_in":1018,"bytes_out":474}],"http_methods":[{"method":"GET","count":32}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/.docker/config.json","count":1,"ports":1},{"path":"/.boto","count":1,"ports":1},{"path":"/.env-sample","count":1,"ports":1},{"path":"/.docker/.env","count":1,"ports":1},{"path":"/.env-example","count":1,"ports":1},{"path":"/.env.docker","count":1,"ports":1},{"path":"/.env.email","count":1,"ports":1},{"path":"/.env","count":1,"ports":1},{"path":"/.env.dev","count":1,"ports":1},{"path":"/.env.openai","count":1,"ports":1},{"path":"/.env.example","count":1,"ports":1},{"path":"/.env.backup","count":1,"ports":1},{"path":"/.env.bak","count":1,"ports":1},{"path":"/.env.old","count":1,"ports":1}],"distinct_paths_total":32,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":32}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":32}],"top_alpns":[{"value":"h2, http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T16:09:23.127022+00:00"}